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Top Stories 

• MRI International and its owner were found liable October 3 for operating a Ponzi scheme 
that raised more than $800 million from thousands of investors living primarily in Japan. - 
U.S. Securities and Exchange Commission (See item 3) 

• Two people were killed in a storm that moved across southern U.S. States October 14 
which flooded roadways and knocked out electricity for more than 66,000 customers, 
closing schools in several States. - Associated Press (See item 19) 

• The Oregon Employment Department notified 851,322 individuals October 13 who 
registered with the WorkSource Oregon Management Information System that their 
information may have been compromised by a security vulnerability. - KPTV 12 Portland; 
KPDX 49 Vancouver (See item 20) 

• Sears Holding Corporation disclosed that the payment data systems associated with the 
company’s Kmart stores were breached and an undetermined amount of consumers’ 
payment card data may have been compromised. - Help Net Security (See item 33) 
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Energy Sector 

See item 19 
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Chemical Industry Sector 

1. October 11, WPVI 6 Philadelphia - (Pennsylvania) Chemical leak forces evacuations 
in south Philadelphia. About 10 employees were evacuated from the Ashland 
Chemical Company facility in Philadelphia after approximately 100 gallons of a non- 
toxic oil based chemical leaked from a broken pipe. The spill was contained to the 
inside of the plant and operations resumed after clean-up was complete. 

Source: http://6abc.com/news/chemical-leak-forces-evacuations-in-south-phila/345907/ 

[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. October 13, NJ.com - (New Jersey) Moonachie factory explosion that injured four 
‘under control,’ officials say. An October 13 explosion caused by a machine that 
combines hydrogen and oxygen at the Inoac Crest Foam plant in Moonachie injured 
four workers and forced an evacuation of the factory while crews conducted a 
precautionary decontamination. The cause of the explosion remains under investigation 
after authorities determined the central warehouse, electrical components, and the 
sprinkler system were all damaged. 

Source: 

http://www.ni.com/bergen/index.ssf/2014/10/moonachie factory explosion that injure 
d four under control officials say.html 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

3. October 10, U.S. Securities and Exchange Commission - (International) SEC obtains 
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summary judgment win on liability in Ponzi scheme case. A federal judge ruled 
October 3 that MRI International and its owner were liable for operating a Ponzi 
scheme that raised more than $800 million from thousands of investors living primarily 
in Japan who believed their investments were being used to purchase medical accounts 
receivable from medical providers at a discounted rate. 

Source: http ://www . sec . go v/litigation/litreleases/20 1 4/lr23 111 .htm 

For another story, see item 33 
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Transportation Systems Sector 

4. October 14, Chicago Tribune- (Illinois) Victims of plane crash ID’d as 3 Kansas 
doctors: ‘They had the American dream.’ Authorities are investigating after all three 
passengers on board a small plane from Midway International Airport en route to 
Lawrence, Kansas, were killed in a crash October 12 in Palos Hills. 

Source: http://www.chicagotribune.com/suburbs/palos/chi-small-plane-crashes-in- 
palos-hills-20141012-story.html 

5. October 14, WXIN 59 Indianapolis - (Indiana) Dozens taken to area hospitals after 
Chicago-bound Megabus crashes on 1-65 in Greenwood. An October 14 accident 
sent 55 people to area hospitals when a car struck a Megabus on northbound Interstate 
65 in Greenwood, Indiana, causing the bus to hit the guardrail and flip over. Both 
northbound and southbound lanes were closed for more than 3 hours while crews 
cleared the scene. 

Source: http://fox59.com/2014/10/14/serious-crash-involving-bus-and-car-shuts-down- 
i-65-in-greenwood/ 

6. October 13, Los Angeles Times - (California) American Airlines flight makes 
emergency landing in San Francisco. An American Airlines flight from San 
Francisco to Dallas, Texas, returned to San Francisco International Airport shortly after 
takeoff for an emergency landing October 13 when several interior panels came loose 
and fell due to a pressurization issue. The plane landed safely and no injuries were 
reported. 

Source: http://www.latimes.com/local/lanow/la-me-ln-american-airlines-emergency- 
landin g-20141013 - story . html 

7. October 11, Associated Press - (North Carolina) US Airways: 2 planes make safe 
emergency landings. Two US Airway flights made unrelated emergency landings at 
Charlotte Douglas International Airport in North Carolina October 1 1 due to a 
pressurization issue and a hydraulic issue. Both airplanes were checked by crews upon 
landing and no injuries were reported. 

Source: http://abcnews.go.com/US/wireStorv/us-airwavs-flight-emergency-landing- 
hurt-26129719 

T Return to top i 
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Food and Agriculture Sector 



8. October 13, WALB 10 Albany - (Georgia) Stolen farm chemicals hurt small 
business. Authorities are investigating after more than $6,000 worth of farming 
chemicals were stolen from a farm in Decatur County October 11. The owners from 
three unaffiliated farms also reported that agricultural chemicals were stolen between 
October 11 and October 12. 

Source: http://www.walb.com/storv/26774971/stolen-farm-chemicals-hurt-small- 
business 

9. October 13, U.S. Department of Agriculture - (California) California firm expands 
recall of beef products due to possible processing flaw. The Food Safety and 
Inspection Service announced October 13 that Galant Food Company recalled an 
additional 130 pounds of Galinas Original- and Paramount-branded Beef and Cheese 
Piroshki because the meat filling used in the products did not meet its cooking critical 
limit. The products were sent to a distributor in the San Francisco Bay area. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-067-20 1 4-release-expansion 

10. October 12, U.S. Food and Drug Administration - (National) Sunburst Foods recalls 
products because of possible health risk. The U.S. Food and Drug Administration 
reported October 12 that SunBurst Foods recalled all SunBurst, Fresh Bites, and Private 
labeled products sold in four States due to possible Listeria monocytogenes 
contamination. The recall was initiated following routine sampling and testing by the 
North Carolina Department of Agriculture & Consumer Services. 

Source: http://www.fda.gov/Safety/Recalls/ucm418645.htm 

11. October 12, U.S. Food and Drug Administration - (Washington) Real Foods of 
Seattle, LLC issues allergy alert on undeclared egg in Mexican Cheddar Dip. The 
U.S. Food and Drug Administration reported October 12 a recall of 96 units of Real 
Foods-branded Mexican Cheddar Dip due to undeclared egg. The product was sold in 
10-ounce packages at Quality Food Center stores in Washington. 

Source: http://www.fda.gov/Safety/Recalls/ucm418648.htm 

12. October 11, Food Poisoning Bulletin - (California) California issues warning for 
recreational shellfish harvesting in Ventura County. The California Department of 
Public Health issued an advisory October 10 warning consumers not to eat 
recreationally harvested bivalve shellfish from the Ventura County coastline due to 
dangerous levels of domoic acid. 

Source: http://foodpoisoningbulletin.com/2014/california-issues-warning-for- 
recreational-shellfish-harvesting-in-ventura-county/ 

13. October 10, U.S. Food and Drug Administration - (National) California Olive and 
Vine announces the voluntary recall of Pumpkin Seed Pesto. The U.S. Food and 
Drug Administration announced October 10 that California Olive and Vine, LLC 
voluntarily issued a recall for its 8-ounce jars of Pumpkin Seed Pesto due to the 
possibility that the product was improperly processed and may be susceptible to 
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Clostridium botulinum contamination. The product was distributed nationwide under 
the Williams-Sonoma label since September 2014. 

Source: http://www.fda.gov/Safety/Recalls/ucm418639.htm 



[ Return to top ] 

Water and Wastewater Systems Sector 

14. October 13, Huntington News Net - (West Virginia) Precautionary boil water 
advisory issued for approximately 100 customers in the Ona Area. A precautionary 
boil water advisory was issued October 13 to approximately 100 West Virginia 
American Water customers in the Ona area of Huntington due to a water main break. 
Source: http ://w w w .huntingtonnews .net/9793 1 

15. October 11, Associated Press - (Rhode Island) Rhode Island reopens 2 areas to 
shellfish harvesting after sewage overflow. Rhode Island environmental authorities 
lifted a precautionary no contact advisory for the Blackstone River in Providence 
October 10 and reopened Conditional Area A and Conimicut Triangle to shellfish 
harvesting October 11 after an October 8 sewage overflow from the Narragansett Bay 
Commission’s and the City of Pawtucket’s sewer system. 

Source: 

http://www.dailvioumal.net/view/storv/d6f3568f8b6f42e8ba86af7e756ee6e7/RI— 

Sewage-Leak-Shellfishing/ 

16. October 10, KIKI 990 AM Honolulu - (Hawaii) Sewage spill prompts warning signs 
at Honolulu Harbor. An estimated 100 gallons of sewage was discharged into 
Honolulu harbor October 9 prompting warnings for the public to stay out of the water 
until further notice. 

Source: http://www.kikiradio.com/articles/local-news-390646/sewage-spill-prompts- 
waming-signs-at- 12852941 

For another story, see item 22 



[ Return to top ] 



Healthcare and Public Health Sector 

17. October 13, KCC1 8 Des Moines - (Iowa) Police: Worker concealed $30K theft from 
employer. Police arrested and charged a pharmacy technician for stealing $30,000 
from Clear Lake Pharmacy in Iowa between 2012 and July. 

Source: http://www.kcci.com/news/police-worker-concealed-30k-theft-from- 
employer/29 106250 

18. October 11, WPVI 6 Philadelphia - (Pennsylvania) Police: $50,000 in stolen goods 
used to run makeshift Rite Aid. The driver of a Rite Aid delivery truck and two 
others were charged October 9 after police discovered they stole more than $50,000 
worth of merchandise from the drug store’s warehouse in Falls Township, 
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Pennsylvania, and resold the items in the basement of a home. The driver was paid a 
fee to hand off the merchandise to the two other suspects who resold the merchandise 
below retail value. 

Source: http://6abc.corn/news/$50k-in-merchandise-stolen-from-rite-aid- 
warehouse/345642/ 
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Government Facilities Sector 

19. October 14, Associated Press - (National) 2 killed as storms sweep across several 
states. Two people were killed in a storm that moved across southern U.S. States 
October 14 producing heavy rains and strong winds which flooded roadways and 
knocked out electricity for more than 66,000 customers in Georgia and Louisiana. 
Schools in several States cancelled classes and activities. 

Source: http://www.msn.com/en-us/news/us/2-killed-as-storms-sweep-across-several- 
states/ar-BB95BDz 

20. October 13, KPTV 12 Portland; KPDX 49 Vancouver - (Oregon) 850,000 people 
potentially impacted by WorkSource Oregon security breach. The Oregon 
Employment Department notified 851,322 individuals October 13 who registered with 
the WorkSource Oregon Management Information System that their information may 
have been compromised by a security vulnerability. Users were asked to change 
passwords and re-set security questions while officials continue to investigate. 

Source: http://www.kptv.com/storv/26776035/worksource-oregon-data-breach-affects- 
850000-people 

21. October 11, KTVU 2 Oakland; Associated Press - (California) Man charged with 
starting devastating wildfire. Police arrested a man October 1 1 in connection to 
starting a wildfire in Weed, California, which destroyed 150 structures and caused the 
evacuation of roughly 1,500 residents. 

Source: http://www.ktvu.com/news/news/local/man-charged-starting-devastating- 
wildfire/nhg3Q/ 

22. October 10, U.S. Environmental Protection Agency - (Missouri) EPA settlement with 
Raymore, Mo., results in stream protections for tributary to South Grand River. 
Region 7 of the U.S. Environmental Protection Agency reached a settlement with the 
city of Raymore, Missouri, October 10 to resolve municipal stormwater violations 
under the Clean Water Act after determining the city was in ongoing non-compliance 
with terms of its permit due to multiple failures. Raymore entered into two 
administrative orders to resolve the violations, including updating and fully 
implementing its stormwater management program plan and paying a $22,000 penalty. 
Source: 

http://vosemite.epa.gov/QPA/ADMPRESS.NSF/d0cf6618525a9efb85257359003fb69d/ 

b03fl6adl9dbe91785257d6d005af895 

23. October 10, KFOR 4 Oklahoma City - (Oklahoma) Metro school closed due to power 
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outage. Classes at St. John Christian Heritage Academy in Oklahoma City were 
cancelled October 10 due to a power outage prompted by a storm that knocked out 
service. 

Source: http://kfor.com/2014/10/10/metro-school-closed-due-to-power-outage/ 
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Emergency Services Sector 

24. October 10, WTKR 3 Norfolk - (Virginia) Bed bug problem reported at Portsmouth 
police dispatch center. Officials with the Portsmouth 9-1-1 Communications Center in 
Virginia worked to relocate emergency services for a 24-hour period after the discovery 
of bed bugs at the facility October 9. Phone lines will be transferred to the center’s 
backup site October 15-16 while crews use chemicals to treat the building. 

Source: http ://wtkr. com/20 14/10/1 O/bed-bug-problem-reported-at-portsmouth-police- 
dispatch-center/ 
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Information Technology Sector 

25. October 14, Help Net Security - (International) Russian espionage group used 
Windows O-day to target NATO, EU. iSIGHT Partners discovered a zero-day 
vulnerability used in a cyber-espionage campaign dubbed SandWorm targeting the 
North Atlantic Treaty Organization, the European Union, Ukrainian and Polish 
government organizations, and several European telecommunications and energy 
sectors. Microsoft is expected to release a patch for the zero-day which exploits 
supported versions of Microsoft Windows and Windows Server 2008 and 2012. 

Source: http://www.net-security.org/secworld.php7idM7491 

26. October 14, Softpedia - (International) Dropbox denies being hacked, points to 
third-party services. Dropbox announced that its servers were not breached after a list 
of 420 username and password pairs were publicized on Pastebin with a poster 
claiming that more would be published with Bitcoin donations. The company reported 
that the information was stolen from other Web services used by the victims, who had 
identical usernames and passwords for Dropbox. 

Source: http://news.softpedia.com/news/Dropbox-Denies-Being-Hacked-Points-At- 
Third-Party-Services-46 1 989.shtml 

27. October 13, Network World - (International) The snappening: Snapsaved admits to 
hack that leaked SnapChat photos. Snapchat’s third-party app Snapsaved was hacked 
involving the release of 500MB of images containing between 90,000 and 200,000 
photos and videos due to a misconfiguration in their Apache server. Snapsaved 
subsequently deleted the entire Web site and database associated with the breach. 
Source: http : //w w w .networkworld . com/article/2 82535 9/micro soft- subnet/the- 
snappening-snapsaved-admits-to-hack-that-leaked-snapchat-photos.html 
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28. October 10, Securityweek - (International) Multiple vulnerabilities found in BMC 
Track-It! help desk software. Researchers with the Computer Emergency Response 
Team Coordination Center at Carnegie Mellon University (CERT/CC) and Agile 
Information Security found that Track-It! version 11.3.0.355, the IT helpdesk solution 
created by BMC Software, contains three vulnerabilities related to permissions, 
privileges, and access control, missing authentication for critical function, and an 
exploitation using blind SQL injection. The company is working on addressing the 
issues. 

Source: http://www.securitvweek.com/multiple-vulnerabilities-found-bmc-track-it- 
help-desk-software 

29. October 10, SC Magazine - (International) New mobile trojan masquerading as Tic- 
tac-toe game targets Android devices. Kaspersky Lab researchers found that a Tic- 
tac-toe game available on Android devices houses the Gomal trojan which allows 
hackers to record audio from the microphone, steal incoming SMS messages, steal data 
from the device log, and obtain root privileges, among other things. Good for 
Enterprise researchers determined that the app was a proof-of-concept app presented at 
Black Hat 2013 and used only in Samsung Exynos memory access vulnerability, which 
has since been patched. 

Source: http://www.scmagazine.com/new-mobile-trojan-masquerading-as-tic-tac-toe- 
game-targets-android-devices/article/376722/ 

30. October 10, SC Magazine - (International) HP to remove digital signature that code- 
signed malware. Symantec discovered that an HP digital certificate was used to 
cryptographically sign (code-sign) malware shipped through HP products in May 2010. 
HP will revoke the digital certificate October 21 after researchers found an apparent 
signature on a four- year-old trojan that may have been included in the software. 

Source: http://www.scmagazine.com/hp-to-remove-digital-signature-that-code-signed- 
malware/article/37 67 37/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



31. October 14, WXIA 11 Atlanta - (Georgia) Wind spreads warehouse fire to nearby 
home. A fire broke out October 13 inside a 100,000-square foot warehouse in Floyd 
County, fully engulfing the structure that houses Habitat for Humanity and other 
agencies. A nearby home was destroyed by the blaze, prompting officials to close 
several streets and temporarily evacuate nearby residences. 

Source: http://www.llalive.com/storv/news/local/rome/2014/10/14/wind-fuels- 
warehouse-fire/17237259/ 

32. October 14, KIRO 7 Seattle - (Washington) Fire burns businesses in Federal Way 
strip mall. At least three businesses located in a Federal Way strip mall were damaged 
by an October 14 fire that started in the basement of one of the stores. A portion of 
Pacific Highway South was closed in both directions while firefighters battled the 2- 
alarm blaze. 

Source: http://www.kirotv.com/news/news/fire-buming-federal-wav-strip-mall/nhh69/ 

33. October 13, Help Net Security - (International) Kmart confirms month-old data 
breach, payment card data stolen. Sears Holding Corporation disclosed that the 
payment data systems associated with the company’s Kmart stores were breached and 
an undetermined amount of consumers’ payment card data may have been 
compromised. The breach is believed to have started in September when attackers 
infected the system with a form of undetectable malware, which was removed after the 
breach was detected October 9. 

Source: http://www.net-security.org/secworld.php?id=17482 

34. October 12, Boston Globe - (Maine) Mechanical failure suspected in fatal Maine 
hayride. One person was killed and 22 others were injured when a hayride wagon 
struck a tree and overturned at Harvest Hill Farms in Mechanic Falls October 1 ldue to 
a suspected mechanical issue that caused a brake failure on the vehicle towing the 
wagon. 

Source: http://www.bostonglobe.com/metro/2014/10/12/teenage-giii-killed-injured- 
maine-havride-accident/VqidnVJEI8vAtf4vVPweOH/storv.html 

35. October 11, Arizona Republic - (Arizona) Officials: Fair brawl not cause for safety 
concerns. Two adults and 33 teens were in custody October 10 after a series of fights 
broke out between about 40 to 60 individuals at the Arizona State Fair in Phoenix. 
Minor injuries and a brief disturbance to fair activities were reported. 

Source: http ://w w w . azcentral.com/story/news/local/phoenix/20 14/10/11 /arizona- state- 
fair-brawl-teens-abrk/17 113743/ 

36. October 11, KTVT 11 Fort Worth - (Texas) Mesquite charity treasurer arrested for 
theft. The former- treasurer of the Tarrant/Dallas County Charity Toy Run was arrested 
October 10 on charges of embezzling more than $71,000 from the charity between 
October 2012 and December 2013 and using the money for personal expenses. 

Source: http://dfw.cbslocal.com/2014/10/ll/mesquite-police-arrest-charity-treasure- 
for-theft 
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Dams Sector 

Nothing to report 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
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